5104 matches found
CVE-2019-18213
XML Language Server (lsp4xml) prior to 0.9.1 used in Red Hat XML Language Support (vscode-xml) prior to 0.9.1 is affected. The vulnerability arises in extensions/contentmodel/participants/diagnostics/LSPXMLParserConfiguration.java, where XXE can be triggered by a crafted XML document, leading to ...
CVE-2019-18212
XMLLanguageService.java in XML Language Server aka lsp4xml before 0.9.1, as used in Red Hat XML Language Support aka vscode-xml before 0.9.1 for Visual Studio and other products, allows a remote attacker to write to arbitrary files via Directory Traversal...
CVE-2019-18212
XML Language Service (lsp4xml) in Red Hat XML Language Support (vscode-xml) versions before 0.9.1 is affected by a directory traversal vulnerability that allows a remote attacker to write to arbitrary files via XMLLanguageService.java. The issue is present in the XML Language Server implementatio...
Visual Studio Code Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in Visual Studio Code when it exposes a debug listener to users of a local computer. A local attacker who successfully exploited the vulnerability could inject arbitrary code to run in the context of the current user. If the current user is logged on...
Microsoft Visual Studio Code CVE-2019-1414 Local Privilege Escalation Vulnerability
Description Microsoft Visual Studio Code is prone to a local privilege-escalation vulnerability. An attackers may exploit this issue to gain elevated privileges. Technologies Affected Microsoft Visual Studio Code Recommendations Permit local access for trusted individuals only. Where possible, us...
KLA11585 Visual Studio Code Elevation of Privilege Vulnerability
An elevation of privilege vulnerability in Visual Studio Code can be exploited remotely to gain privileges. Original advisories CVE-2019-1414 Related products Microsoft-Visual-Studio CVE list CVE-2019-1414 high KB list Solution Install necessary updates from the KB section, that are listed in you...
Microsoft Visual Studio Vscontent Information Disclosure (CVE-2019-0537)
An information disclosure vulnerability exists in Microsoft visual studio. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...
Microsoft Visual Studio Code Installed (Mac OS X)
Binary data macosxmicrosoftvisualstudiocodeinstalled.nbin...
Microsoft Visual Studio Code Installed (Windows)
Binary data microsoftvisualstudiocodewinuserinstalled.nbin...
Microsoft Visual Studio Code Installed (Linux)
Binary data microsoftvisualstudiocodelinuxinstalled.nbin...
The vulnerability of the Diagnostics Hub Standard Collector Service in the Visual Studio software development environment for Windows operating systems allows a hacker to escalate their privileges.
The vulnerability of the Diagnostics Hub Standard Collector Service in the Visual Studio software development environment for Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker to enhance their privileges...
Security Updates for Microsoft Visual Studio Products (September 2019)
The Microsoft Visual Studio Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly impersonates certain file operations. An attacker who...
Microsoft Visual Studio, Windows and Windows Server Elevation of Privilege Vulnerability
Microsoft Windows and others are products of Microsoft Corporation.Microsoft Windows is a set of operating systems for use on personal devices.Microsoft Windows Server is a set of server operating systems.Microsoft Visual Studio is a Microsoft Visual Studio is a family of development tool suites...
Description of the security update for the information disclosure vulnerability in Microsoft Visual Studio 2015 Update 3: September 10, 2019
None None...
Microsoft Windows Diagnostics Hub CVE-2019-1232 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. Local attackers can exploit this issue to elevate the privileges and take control of an affected system. Technologies Affected Microsoft Visual Studio 2015 Update 3 Microsoft Visual Studio 2017 15.0 Microsoft...
KLA11554 Multiple vulnerabilities in Microsoft Developer tools
Multiple vulnerabilities were found in Microsoft Developer tools. Malicious users can exploit these vulnerabilities to gain privileges, cause denial of service, execute arbitrary code, spoof user interface, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An elevation...
Node.js third-party modules: Trojan:JS/CoinMiner in npm files
Hello, I am a front end developer and use Vue.js and Visual Studio Code and have had an issue recently with scripts not running in my terminal so decided to fault find. All programmes that I can think of are up to date, and today I decided to do a full windows defender scan and found the above...
The vulnerability of the Git component of Microsoft Visual Studio’s software development tools allows attackers to enhance their privileges.
The vulnerability of the Git component in Microsoft Visual Studio is related to privilege management errors. Exploiting this vulnerability can allow an attacker to increase their privileges...
Microsoft Visual Studio Privilege Mobilization Vulnerability (CNVD-2019-40538)
Microsoft Visual Studio is a family of development tool suites from Microsoft, and a largely complete development toolset that includes most of the tools needed throughout the software life cycle. A privilege extraction vulnerability exists in Microsoft Git for Visual Studio, which stems from the...
CVE-2019-1211
An elevation of privilege vulnerability exists in Git for Visual Studio when it improperly parses configuration files. An attacker who successfully exploited the vulnerability could execute code in the context of another local user. To exploit the vulnerability, an authenticated attacker would ne...